v . . .....i*;«i 0 ,icprR the method. 



Amethod ol assurmg "i-e-v * 

^ PliSing: V.iningauser-spe.ona.infon.aUon^theuse, 

Yainin g a fir s l se t o f p h ysio 1 o g icaUden tif ie r s assorted 

WitWthe img-inadigitaistoragemedium, a data se, pertinent * 

C " \ j- fv,*, iter's personal information and a 

„ onlifWthesubjectprovidesanewsetofphysWogtca, 
set pertinent to the user onK\if M the J- ^ ^ ^ ^ te 

identifiers and (ii) it is deterged, by recoup ^ 

15 corresponding member of the fmst set, 

A in \ claim 1, further comprising obtaining a 
, A^-W^ andw he r einthedatasetmcludesthe 
user's medical information from the laser, ana 

US er's medical information. 1# where in the first set includes a 

2( ^K 3. A method according to claim i, 

^"Itlwdingtociairn, wherein the first set o f physic. 

^■I^^S; .^--.he^.tofphysio^ 

identifiers includes the <^^"^^ZZ^^ 
, A-thodaccordingtoda^l^ heuserandan 

one member sdected from the group consrstmg o^fmg 
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the configuration of an ms in an eye of the user and at least one member selected 
from the group consisting erf characteristics of utterances of the user and the 
appearance of the user's face\ / 

9. A method according to .claim 1, wherein, pursuant to step (d), a 
subject is permitted to modify information in the stored data set only if the 
subject provides the new set ofjmysiological identifiers under a condition 
permitting verification, independent of the physiological identifiers, that the new 
set is being provided by Jhe person purporting to provide them. 

10. A method according to claim ^wherein the condition includes the 
physical presence of the subject when providing the new set. 

11. A method according tcyclaim 9, wherein the condition includes 
having the subject provide the new set when prompted to do so. 

12. A method according to claim 9, wherein the condition includes 
having the subject provided non-physiological identifier. 

13. A method / according to claim 12, wherein the non-physiological 
identifier is selected'from the group consisting of a password and a pass card. 

4. A<n\ethod according to claim 9, wherein the non-physiological 
dentifier is provided in the course of a session, over a computer network, 
employing a user's public and private keys. 

15. A method \ccording to claim 1, further comprising: 
prompting a user, cm a periodic basis, to update the data set pertinent to 

the user. \ 

16. A method for authenticating a user transaction, the method 
comprising: \ 

obtaining a test set of physiological identifiers from a subject purporting to 
be the user; \ 

accessing information in the data sV pertinent to the user stored in 
accordance with the method of claim 1; and\ 

determining if there is a sufficient matcrt between at least one member in 
the test set and a corresponding physiological identifier represented in the data 
set. 
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AWthodforauthenttcatingauser .reaction, the m e«hod 
be a specific user; \ a first data sel pertinent to the specific user stored 

" d :;ttal^-- h8 ^ raiwormataofl 

•^^^73;^ S e tofphy sio,o gl calidentifie r s associated with 
user and a represents of a hrst set p y edification 

!B A method according to claim 17, wherein: 
Z database is accessible via a server at a first toe.**; 
obtaining the test of physiological identifiers is performed atasecon 

server from the second location over a network. 

19 A method according to claim 18, where)* 
obtainmgthetestsetofphysiologicalidenXsisperformedunder 

supervision of a merchant. / 

20 A method according to claim 19 Xvherem: 

transaction is a change of address fo/an account. 
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22 Ame,hodaccordin g toan y ofc,aims IS throu^herern the 
taction is an application to open an account / the 

23. A method according to clarm 21, whereirym 

transfer of funds. Xrein the account authorizes the 

M . A method according to darm 22^herem 

^"tlemodaccordins^ 

26. A method according to claim z , 

c Ait- tr, thp account holder. 
, extension of credit to the ac wherein the transaction is an 

onisan 

renewal ofan identification token. a multi . user 

7 AdiWstoragemediumonwluchhasbee 
^JlTnformatSata^thedatahasecompnsm^foreachu 

^rr-semergeV— "^conta, inga 

b . a user access determining whether the 
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representation of the first set ofjDhysiological identifiers, so that the subject is 

authenticated as the user; ( / 

/ 

a user/data set access module, coupled to the user access 
authorization module/and to the database, for accessing the user data set, in the, 
5 event that the usep'access authorization module has authenticated the subject as 
the user; and 

d. a user data set update module, coupled to the database and 
to a usef input, permitting the user to update such user's corresponding data set 
in the database. 

10 ^~?>X^ A system for authenticating transactions, the system comprising: 
nulti-user personal information data base, the data base 
comprising, for each user, a data set pertinent to such user, the data set including: 
such user's personal information obtained from the 

user; 

a representation of a first set of physiological 
identifiers associated with the mser; 

b. a multiplicity of remotely distributed terminals in 
communication with the data base* each terminal including a physiological 
identifier transducer and a communication link with a merchant; and 

c. an authenticity checker, which determines whether there is a 
sufficient match between the output ona physiological identifier transducer 
attributable to a subject purporting to be\a user and a physiological identifier in 
the first set. 

32. A system according to claim 31, whprein the first set includes a 
25 plurality of members. 

33. A system according to claim/5l, wherein the first set includes at least 
one member selected from the group consisting of a fingerprint of the user and 
the configuration of an iris in an eve of the user and at least one member selected 
from the group consisting of characteristics of utterances of the user and the 

30 appearance of the user's face 
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